Media
CVE-2022-43985
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.999
Restablecer filtros
Alta
CVE-2022-43766
Apache IoTDB version 0.12.2 to 0.12.6, 0.13.0 to 0.13.2 are vulnerable to a Denial of Service attack when accepting untrusted patterns for REGEXP queries with Java 8. Users should upgrade to 0.13.3 wh
Crítica
CVE-2022-37298
Shinken Solutions Shinken Monitoring vulnerable to Incorrect Access Control
Media
ghsa-8r99-h8j2-rw64
Twisted vulnerable to HTTP Request Smuggling Attacks
Alta
CVE-2022-39280
ReDoS issue in dparse
Alta
CVE-2022-36551
A Server Side Request Forgery (SSRF) in the Data Import module in Heartex - Label Studio Community Edition versions 1.5.0 and earlier allows an authenticated user to access arbitrary files on the syst
Media
CVE-2022-40754
In Apache Airflow 2.3.0 through 2.3.4, there was an open redirect in the webserver's `/confirm` endpoint.
Media
CVE-2022-35960
TensorFlow vulnerable to `CHECK` failure in `TensorListReserve` via missing validation
Alta
CVE-2022-31006
indy-node is the server portion of Hyperledger Indy, a distributed ledger purpose-built for decentralized identity. In vulnerable versions of indy-node, an attacker can max out the number of client co
Alta
CVE-2022-3221
rdiffweb CSRF vulnerability in profile's SSH keys can lead to unauthorized access
Crítica
CVE-2022-36436
VNCAuthProxy authentication bypass vulnerability
Alta
CVE-2022-3174
rdiffweb vulnerable to Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
Alta
CVE-2022-36070
Poetry vulnerable to Untrusted Search Path leading to Local Code Execution on Windows
Alta
CVE-2022-36069
Poetry Argument Injection can lead to Local Code Execution
Alta
CVE-2022-38369
Apache IoTDB version 0.13.0 is vulnerable by session id attack. Users should upgrade to version 0.13.1 which addresses this issue.
Alta
CVE-2022-31152
Denial of service due to incorrect application of event authorization rules
Media
CVE-2022-38170
Apache Airflow exposes arbitrary file content
Crítica
CVE-2022-38054
Apache Airflow Session Fixation vulnerability
Crítica
CVE-2022-2996
python-scciclient vulnerable to Man-in-the-middle (MITM) attacks
Media
CVE-2022-36046
Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affected by this CVE: Next.js version 12.2.3, Node.js version above v1
Media
CVE-2021-32862
nbconvert vulnerable to cross-site scripting (XSS) via multiple exploit paths
Alta
CVE-2022-36024
Bots using py-cord as Discord API wrapper are vulnerable to shutdowns through remote code execution
Media
CVE-2022-35918
Streamlit is a data oriented application development framework for python. Users hosting Streamlit app(s) that use custom components are vulnerable to a directory traversal attack that could leak data
Alta
CVE-2022-36447
chia-blockchain tokens can be inflated to an arbitrary extent
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.